Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/rzs94-4p5WqpqFuLPOniMuinCA8.roa
File: rzs94-4p5WqpqFuLPOniMuinCA8.roa (raw, json)
Hash identifier: imUVieHq/SWv62q6JD4CPhXjjlcRML1jWuw8WzfKOvY=
Subject key identifier: AF:3B:3D:E3:EE:29:E5:6A:A9:A8:5B:8B:3C:E9:E2:32:E8:A7:08:0F
Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Certificate serial: 018AFEB7E1B68AA6133E3CC848B2B0A757C2
Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/rzs94-4p5WqpqFuLPOniMuinCA8.roa
Signing time: Thu 05 Oct 2023 07:22:58 +0000
ROA not before: Thu 05 Oct 2023 07:22:58 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 207992
IP address blocks: 193.160.130.0/24 maxlen: 24
Validation: Failed, certificate revoked on Mon 01 Jan 2024 12:29:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:fe:b7:e1:b6:8a:a6:13:3e:3c:c8:48:b2:b0:a7:57:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4
Validity
Not Before: Oct 5 07:22:58 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=af3b3de3ee29e56aa9a85b8b3ce9e232e8a7080f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d6:a8:3b:0d:39:a2:c0:8b:0a:e9:20:36:2f:
ed:b0:b4:fc:48:56:87:b3:ce:38:9e:40:75:c3:e4:
13:1c:0c:ad:ff:25:4a:8a:56:36:e9:9e:5f:10:d8:
f3:8f:e1:9d:cd:37:55:88:61:30:6c:fe:36:71:25:
f0:f2:1c:16:84:22:e0:20:09:fd:f9:b8:45:60:33:
75:71:ab:47:4f:36:ba:6a:56:e0:10:b2:94:04:da:
a6:11:fb:2b:0a:06:d9:97:61:c7:3f:ac:8d:96:18:
07:ad:d4:30:42:85:d5:bc:30:2a:bf:1e:2e:31:c1:
53:fe:b4:f7:c3:27:f5:ce:5b:dd:9b:04:de:a3:6f:
81:2b:b4:8c:85:86:de:6d:a3:cc:34:b0:82:2f:68:
9e:3a:a9:1f:14:7a:73:ad:f8:7b:83:13:ca:e5:4f:
09:00:76:f9:aa:97:22:88:40:b1:61:b9:36:e4:16:
6b:19:2b:b4:c8:68:2b:8d:fc:24:8e:e2:d6:b2:40:
62:23:27:01:5d:6d:68:e6:bf:b4:6c:60:5c:16:74:
ed:eb:40:78:33:88:1b:43:ab:3c:33:3a:76:d3:04:
c7:85:58:f0:36:a8:f9:60:8e:9c:67:37:b5:52:a5:
44:85:46:0e:1a:ea:cc:25:85:15:fa:9e:e5:c4:4e:
75:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:3B:3D:E3:EE:29:E5:6A:A9:A8:5B:8B:3C:E9:E2:32:E8:A7:08:0F
X509v3 Authority Key Identifier:
keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/rzs94-4p5WqpqFuLPOniMuinCA8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.160.130.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:23:e1:b5:45:49:38:55:5b:eb:78:f0:e3:29:fe:c5:80:ca:
b2:57:2e:8e:6c:d3:92:ff:9e:88:dc:76:3e:27:90:2b:85:f9:
93:88:80:2c:62:c9:5a:9c:d0:ae:aa:90:fe:00:82:2f:b0:e6:
a2:3b:ec:f5:3c:0b:2a:96:7f:3a:92:cf:9b:e3:ff:c4:1b:70:
ae:11:e1:f1:ae:61:6d:4b:c9:6a:2c:26:5e:4d:d0:df:a8:bf:
9c:db:46:89:98:03:e7:13:83:55:7a:f2:22:d3:b6:e5:db:2a:
94:a0:c3:dc:f1:3e:08:3e:83:e6:51:55:df:97:93:be:ac:c6:
08:7c:2d:41:93:c8:99:0a:fb:ab:78:5c:1b:6a:c9:66:c4:6a:
e2:16:d4:1f:49:bf:18:eb:ba:0a:76:fe:be:dc:c4:e3:c9:67:
57:61:66:3f:e2:a4:f4:c3:28:52:23:2e:68:c1:aa:48:49:1d:
91:cd:08:b5:a6:50:43:93:36:cf:58:de:a7:6e:3f:11:fb:a0:
dc:66:7a:c5:01:c8:3e:d3:ce:21:a9:20:1a:35:4b:79:59:6c:
79:ad:18:c2:a9:19:e2:08:35:c9:44:0c:1d:e2:fa:87:16:aa:
b0:57:0f:57:48:12:65:27:dc:4c:47:3e:8f:d6:3f:4c:c8:1a:
20:9b:dd:08
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAYr+t+G2iqYTPjzISLKwp1fCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz
NjliYTQwHhcNMjMxMDA1MDcyMjU4WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZjNiM2RlM2VlMjllNTZhYTlhODViOGIzY2U5ZTIzMmU4YTcwODBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAutaoOw05osCLCukgNi/tsLT8SFaH
s844nkB1w+QTHAyt/yVKilY26Z5fENjzj+GdzTdViGEwbP42cSXw8hwWhCLgIAn9
+bhFYDN1catHTza6albgELKUBNqmEfsrCgbZl2HHP6yNlhgHrdQwQoXVvDAqvx4u
McFT/rT3wyf1zlvdmwTeo2+BK7SMhYbebaPMNLCCL2ieOqkfFHpzrfh7gxPK5U8J
AHb5qpciiECxYbk25BZrGSu0yGgrjfwkjuLWskBiIycBXW1o5r+0bGBcFnTt60B4
M4gbQ6s8Mzp20wTHhVjwNqj5YI6cZze1UqVEhUYOGurMJYUV+p7lxE515QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK87PePuKeVqqahbizzp4jLopwgPMB8GA1UdIwQY
MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt
ZGRjMjY2NTY0NmNjLzEvcnpzOTQtNHA1V3FwcUZ1TFBPbmlNdWluQ0E4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj
LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwaCCMA0G
CSqGSIb3DQEBCwUAA4IBAQB/I+G1RUk4VVvrePDjKf7FgMqyVy6ObNOS/56I3HY+
J5ArhfmTiIAsYslanNCuqpD+AIIvsOaiO+z1PAsqln86ks+b4//EG3CuEeHxrmFt
S8lqLCZeTdDfqL+c20aJmAPnE4NVevIi07bl2yqUoMPc8T4IPoPmUVXfl5O+rMYI
fC1Bk8iZCvureFwbaslmxGriFtQfSb8Y67oKdv6+3MTjyWdXYWY/4qT0wyhSIy5o
wapISR2RzQi1plBDkzbPWN6nbj8R+6DcZnrFAcg+084hqSAaNUt5WWx5rRjCqRni
CDXJRAwd4vqHFqqwVw9XSBJlJ9xMRz6P1j9MyBogm90I
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:27:40 2024 by rpki-client on console-fra.rpki-client.org